Finding username that is trying to access system

20 pts.
Tags:
AS/400 administration
AS400 Command
Hi folks, We just did a Help Systems security audit on our server and the report shows that the Largest number of Invalid Sign on Attempts on 1 profile is 78. However we don;t know what the user profile is.  This has us alarmed, with so many attempted signons. Wondering how would I go about finding which user profile this is? Is there a specific command that I can run? Thanks
0

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Discuss This Question: 4  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • TheRealRaven
    You'll need to ask the HelpSystems support group unless you can show us exactly what notices look like. Where are you seeing these? In a HelpSystems report?
    36,440 pointsBadges:
    report
  • ToddN2000
    What other measures do you have in place? For us after 3 invalid attempts the profile is disabled. Does anything show in the QHST log around the time of the attempts ? 
    135,525 pointsBadges:
    report
  • Splat
    Do you have system-level auditing enabled?
    12,915 pointsBadges:
    report
  • HimanshuS
    If you use the command DSPUSRPRF for *ALL users and get the Basic info in an outfile, then you can get this information. Look for the field UPNVSA (Verifications not valid). This number should match what you have on the report.
    145 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: